Malicious code in resolvers-luna-cassini-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bff5db309fc66bdcbce4dd897c9cf87a4b39740f19b7968ddf67e33dd7f4a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-procyon-helmet-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704d4e192cf4d42193c7b8db4484f4d13f416e37a0dd024afa08df4ee3a6d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-quark-celeste-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea4334579260db551945a868a011ad61151a559d906846ade5299adf7561ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-local-cordelia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4804f6c26a015c218ee4af9c94f675e49eb8f5d5bcad94949493daae11d0962a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-superagent-csv-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac37a2b7d4cf959487b6971f5a52dfd4de82f944d66391f5002aadcedb11b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-nova-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b583ea4560f220551e95bd3c98bc2ed79453362f6bdc60b3ea7b69cba8f1cf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-slidev-middleware-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344684591780ddb2924ad9c248fd8d91d956e9e4ffe38df0593aa3a037c0a957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-update-tethys-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea68645694de9a182b55de9fa8c58d02c1340608c7676ac3400270fe913aa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bulma-mocha-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4d1d54b8f25c3f3912f8fe0efdaa4779ce0fd2a782786d350f986a550ed31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-acamar-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14781a39d6d69e629d547eaf40201c1ef2d60b600ac6c32935657bcaa9cd5a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146564 Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...